Skip to contentStellarwp Givewp – Donation Plugin And Fundraising Platform vulnerabilities
- stellarwp givewp – donation plugin and fundraising platformGiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' ParameterCVE-2026-1181938.8 High
- stellarwp givewp – donation plugin and fundraising platformGiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode AttributesCVE-2026-976436.4 Medium
- stellarwp givewp – donation plugin and fundraising platformGiveWP <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesCVE-2026-55106.4 Medium
- stellarwp givewp – donation plugin and fundraising platformGiveWP <= 4.16.3 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template SettingCVE-2026-149876.4 Medium
- stellarwp givewp – donation plugin and fundraising platformGiveWP <= 4.16.1 - Authenticated (Give Worker+) Stored Cross-Site Scripting via Sequioa FormCVE-2026-137046.4 Medium
- stellarwp givewp – donation plugin and fundraising platformGiveWP <= 4.15.3 - Cross-Site Request ForgeryCVE-2026-119814.3 Medium
- stellarwp givewp – donation plugin and fundraising platformGiveWP <= 4.16.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode AttributeCVE-2026-132466.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'CVE-2025-132067.2 High
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign AssociationCVE-2025-112285.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns DisclosureCVE-2025-112276.5 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation UpdateCVE-2025-72214.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data ExposureCVE-2025-86205.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site ScriptingCVE-2025-72055.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And ModificationCVE-2025-45715.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.22.1 - Authenticated (Subscriber+) Sensitive Information ExposureCVE-2025-23315.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive <= 3.22.0 - Missing Authorization to Unauthenticated Arbitrary Earning Reports Disclosure via give_reports_earnings FunctionCVE-2025-20256.5 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object InjectionCVE-2025-09129.8 Critical
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object InjectionCVE-2024-12877Public exploit9.8 Critical
- givewp, stellarwp givewp – donation plugin and fundraising platform, webdevmattcrom givewp donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code ExecutionCVE-2024-96349.8 Critical
- givew donation plugin and fundraising platform, givewp, stellarwp givewp – donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object InjectionCVE-2024-8353Public exploitEPSS 32.6%9.8 Critical
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order ParameterCVE-2024-91307.2 High
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 3.15.1 - Unauthenticated Full Path DisclosureCVE-2024-65515.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform, webdevmattcrom givewp donation plugin and fundraising platform +2 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Unauthenticated Event Settings UpdateCVE-2024-59406.5 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Missing Authorization to Limited Information ExposureCVE-2024-59395.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code ExecutionCVE-2024-5932Public exploitEPSS 76.8%10.0 Critical
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Missing Authorization to Authenticated (Subscriber+) Limited File DeletionCVE-2024-59415.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post ActionsCVE-2024-59775.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-37146.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-19576.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-14246.4 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-514156.5 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivationCVE-2023-42475.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installationCVE-2023-42464.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration DeletionCVE-2023-42485.4 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object InjectionCVE-2023-325137.5 High
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)CVE-2022-403125.5 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-254505.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP < 2.21.3 - DoS via CSRFCVE-2022-22606.5 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP < 2.21.3 - Admin+ Stored Cross-Site ScriptingCVE-2022-22154.8 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information DisclosureCVE-2022-21175.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Reflected Cross-Site Scripting via Import ToolCVE-2022-02526.1 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms DashboardCVE-2021-251006.1 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Unauthenticated Reflected Cross-Site ScriptingCVE-2021-250996.1 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP < 2.12.0 - Authenticated Stored XSSCVE-2021-245244.8 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreGive WP < 2.10.4 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-243154.8 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreGiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS)CVE-2021-242136.1 Medium